34ab41c9bbcf1f14d8527d9231bb361b[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34ab41c9bbcf1f14d8527d9231bb361b.bin
Size

972KB
MD5

305000197ed3fa8ff6fb7e24bc78fb87
SHA1

a2fc3eb6f3188d44a5b81b8b2bff7989ae84a991
SHA256

d972ad13c0fab30e72a3bd67d1fe094a96df0bb6d636e4d7e7fdc52544536cd1
SHA512

b977f08fc32d0ab96503eed2766b49e83822aa1347cc9b777d622a7958506acb6cf551dee35a385b341ab00939f742752eb1cc1556cb61d85b29c55ded394037
SSDEEP

24576:JW9FCcfrT1ntNlHXZvdbqIENCj7fReLU+F5b6R8jOBIc:kXtp1PuIug7fReLU+7/OBIc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/8c418ca9c0c85371c5903758cf553c5a192ebde1e44a2e18c1a391b08a4d46ec.exe

Files

34ab41c9bbcf1f14d8527d9231bb361b.bin
.zip

Password: infected
8c418ca9c0c85371c5903758cf553c5a192ebde1e44a2e18c1a391b08a4d46ec.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ